Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          DX77Ea5H3gC8CXXSR3adRmbv9UP2JxU8g6Bng73L1GA=
Subject key identifier:   1B:A7:4F:6D:99:7D:07:4E:EA:C6:DF:AA:C5:CB:AC:63:C9:72:3E:7D
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       019E1F7E8BD667B3330D865268FCE8117C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 04:00:47 +0000
Manifest this update:     Wed 13 May 2026 04:00:47 +0000
Manifest next update:     Thu 14 May 2026 04:00:47 +0000
Files and hashes:         1: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: +jKJeANu5vJs0LwQ7RdrQ3xycOWvCwPmmNONp+GT33o=)
                          2: laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa (hash: /wFzciiClGguyVDotQvNMJ7uLZC1BigJCYVP4cmqfI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:8b:d6:67:b3:33:0d:86:52:68:fc:e8:11:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: May 13 04:00:47 2026 GMT
            Not After : May 14 04:00:47 2026 GMT
        Subject: CN=1ba74f6d997d074eeac6dfaac5cbac63c9723e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:14:56:ea:5a:6f:80:48:84:f5:ab:23:f9:
                    7f:c0:9e:cd:ab:66:f0:a8:31:07:d6:b8:31:05:1e:
                    42:a9:ca:ca:4e:24:21:8c:97:b0:a2:b1:05:93:5c:
                    72:95:c2:29:7e:3a:f6:26:65:58:be:f7:0b:3e:77:
                    e6:cd:c1:78:c4:96:76:3a:40:92:2c:c9:3b:5b:05:
                    fa:d6:78:5b:da:6b:d5:f3:61:8a:ce:fc:00:0d:5c:
                    e3:fb:fd:d5:0b:8a:90:f8:2e:be:98:3a:38:68:45:
                    f5:52:82:cf:d3:b8:e8:c9:fe:35:94:c3:89:9e:55:
                    18:b3:31:b2:2e:b0:31:2b:0f:68:82:de:5c:57:55:
                    7e:40:f4:0c:39:e0:c3:90:9f:58:d7:6b:49:cd:d1:
                    d5:5a:27:ed:c6:1b:7d:5c:c8:24:d1:d4:e0:ee:35:
                    5b:48:82:6a:c7:7f:4b:37:17:9b:f7:f7:8a:c1:f5:
                    cc:a2:af:8f:84:8a:4d:27:93:af:2d:e5:91:45:d3:
                    40:40:99:a1:81:e5:19:d3:c9:e4:62:87:21:a6:99:
                    49:a8:d4:f7:63:58:d2:1f:f4:a0:d2:dc:61:54:18:
                    43:8f:d5:63:d1:00:a9:fa:37:2a:11:15:c1:52:d0:
                    22:25:9b:5b:1c:46:3e:f7:ca:00:f7:d7:d2:61:99:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:4F:6D:99:7D:07:4E:EA:C6:DF:AA:C5:CB:AC:63:C9:72:3E:7D
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:c6:d4:1b:26:b6:58:8b:9e:1a:c0:52:18:2f:78:f9:aa:
         51:7f:2f:2b:8a:fd:d4:79:0b:e3:c8:d2:54:8f:3d:69:1d:f7:
         d6:98:22:06:28:03:77:97:ad:37:ab:51:85:e6:23:8a:1b:a6:
         bc:d1:c1:75:8d:ac:81:c6:bd:e0:25:34:67:34:5b:99:03:e5:
         ed:9f:5a:13:1a:f3:d1:3d:6e:37:9a:2e:e1:07:8d:e4:04:45:
         ed:0e:a0:05:f9:1c:6f:f2:fa:a6:2e:8e:9d:69:a1:8e:dc:83:
         53:d0:c0:24:20:48:a6:bc:cc:e5:e0:ff:1e:22:66:c8:a1:ff:
         85:e6:5f:5e:99:22:e5:74:6c:19:94:ae:44:0c:24:40:4e:01:
         42:da:b0:d1:ea:e9:94:28:5d:0f:57:0c:cd:f7:75:00:4c:c6:
         15:7b:e0:fa:ca:80:4c:a9:da:46:1a:79:aa:fd:86:1a:3a:f7:
         59:e6:b5:67:65:25:b1:ca:aa:75:cb:b1:02:70:73:7e:f0:a8:
         67:79:28:87:3b:6e:b1:3e:44:dd:dd:e8:b3:e0:3d:60:29:a1:
         b3:1f:b3:2e:00:9b:9e:76:6f:c0:84:5b:61:1e:9c:32:44:c8:
         f3:4d:7c:06:b1:09:93:c5:81:3c:1c:81:46:82:b2:a1:38:ca:
         3f:94:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:14 2026 by rpki-client